This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft File: A9yMYjke_dTdGORoGeF3gAKpoYc.mft (raw, json) Hash identifier: ByMkmCoscNj/fWJ8XyzjJe0SvcLGcM/Xa4sKEJvJ6xU= Subject key identifier: 9C:A6:B8:85:4B:24:A7:1C:4A:6D:0E:1C:A8:DB:23:26:F9:EB:9E:5D Authority key identifier: 03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87 Certificate issuer: /CN=03dc8c62391efdd4dd18e46819e1778002a9a187 Certificate serial: 019B3D5A574F26FF0AD9BBC0D5CC79C9244E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft Manifest number: 0548 Signing time: Sat 20 Dec 2025 20:01:29 +0000 Manifest this update: Sat 20 Dec 2025 20:01:29 +0000 Manifest next update: Sun 21 Dec 2025 20:01:29 +0000 Files and hashes: 1: A9yMYjke_dTdGORoGeF3gAKpoYc.crl (hash: XEqjGd6KOBSaZYTjTf5TGbhxY1dTIKVHsmZBMbukws0=) 2: KMKlBIWdbSLJxhG6mlrGw76dE8w.roa (hash: wMSY3OLmFX6U/ZLAS1pVuwf7520K0rZUrgx8A8ShiM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:57:4f:26:ff:0a:d9:bb:c0:d5:cc:79:c9:24:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03dc8c62391efdd4dd18e46819e1778002a9a187 Validity Not Before: Dec 20 20:01:29 2025 GMT Not After : Dec 21 20:01:29 2025 GMT Subject: CN=9ca6b8854b24a71c4a6d0e1ca8db2326f9eb9e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:24:8e:7e:b4:f5:36:96:38:9d:c8:da:2b:0e: 14:d6:0d:ad:49:bb:70:ae:92:15:89:6b:4f:ce:f2: a6:4a:d2:f8:8b:43:41:66:5e:64:73:c8:bf:48:ce: 35:34:9b:8b:a5:54:59:f7:e0:92:01:81:95:27:5d: e2:6f:2c:99:f5:ae:85:0c:8b:35:5f:ea:82:d2:85: 60:26:f7:fe:ab:3f:7f:ea:c9:77:2c:b4:00:40:aa: ea:c7:98:97:aa:1c:0f:ae:55:a6:50:cc:dd:68:56: 66:9c:9f:bc:4e:dd:e7:c0:51:07:e3:95:52:20:2f: 48:b2:bd:23:35:1a:32:83:5f:d1:71:21:df:06:fd: 90:0f:d5:20:92:68:53:a4:6e:85:bf:d2:ad:7e:85: 87:f0:0b:9e:7b:07:51:11:c6:cf:a7:d4:83:d3:10: 8d:fd:c3:34:e6:ac:f3:09:7b:9a:8b:aa:62:3e:26: 63:01:12:4b:5e:84:a5:7a:2b:a1:40:2f:db:77:a8: 0c:69:74:ab:9f:31:a7:d5:2c:44:6f:29:bf:9c:d1: 3a:d4:5c:cd:2f:9a:ac:54:d0:a8:99:35:f0:c5:38: ed:38:b8:c3:bd:cc:1f:a1:23:47:d9:c3:b7:86:fc: bf:da:35:e2:49:f6:94:8e:e1:af:0a:20:d2:7f:9d: f3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A6:B8:85:4B:24:A7:1C:4A:6D:0E:1C:A8:DB:23:26:F9:EB:9E:5D X509v3 Authority Key Identifier: keyid:03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:72:3b:87:fd:8d:0b:51:89:71:40:ae:49:16:28:f8:da:a9: 34:89:79:80:4f:f9:54:17:bf:72:5a:a5:5e:f8:b2:f0:aa:26: 7e:c7:f7:87:41:0a:a2:18:7c:27:ef:81:0e:9c:9d:ed:aa:a6: ef:98:05:18:a5:64:a1:0e:33:49:59:0d:41:35:39:fe:aa:65: 96:30:6c:e8:e1:7a:b1:cc:ac:31:60:7b:c2:b1:0b:ef:e0:41: e7:c5:73:ab:42:67:fc:1e:0d:e8:fb:61:9b:eb:09:5f:00:09: c8:5a:53:c4:cd:ec:6a:74:5e:ae:11:bb:f3:91:e3:93:fe:b8: 55:e6:49:a0:51:c2:33:6e:d5:0c:0a:bb:8b:31:72:9b:cb:7b: ba:dd:ef:53:d8:63:c6:4a:04:54:9f:8a:76:1f:55:83:84:97: 1a:5f:f1:de:05:4a:5a:9c:4e:b0:33:07:13:83:5c:1b:2a:51: 23:f8:e9:57:95:8a:4e:54:fd:d6:4d:da:86:cd:ae:56:e0:54: 85:7c:a5:e0:42:fd:4e:7a:64:5e:a9:50:12:d9:4d:a3:30:fb: 12:90:4c:ec:eb:dc:c9:18:c8:3a:34:69:93:38:e8:cd:de:bf: be:8f:c6:79:c5:1b:2b:b1:a1:9b:37:3e:95:9c:72:fd:59:04: 28:49:c1:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WldPJv8K2bvA1cx5ySROMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZGM4YzYyMzkxZWZkZDRkZDE4ZTQ2ODE5ZTE3NzgwMDJh OWExODcwHhcNMjUxMjIwMjAwMTI5WhcNMjUxMjIxMjAwMTI5WjAzMTEwLwYDVQQD Eyg5Y2E2Yjg4NTRiMjRhNzFjNGE2ZDBlMWNhOGRiMjMyNmY5ZWI5ZTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkySOfrT1NpY4ncjaKw4U1g2tSbtw rpIViWtPzvKmStL4i0NBZl5kc8i/SM41NJuLpVRZ9+CSAYGVJ13ibyyZ9a6FDIs1 X+qC0oVgJvf+qz9/6sl3LLQAQKrqx5iXqhwPrlWmUMzdaFZmnJ+8Tt3nwFEH45VS IC9Isr0jNRoyg1/RcSHfBv2QD9UgkmhTpG6Fv9KtfoWH8AueewdREcbPp9SD0xCN /cM05qzzCXuai6piPiZjARJLXoSleiuhQC/bd6gMaXSrnzGn1SxEbym/nNE61FzN L5qsVNComTXwxTjtOLjDvcwfoSNH2cO3hvy/2jXiSfaUjuGvCiDSf53zrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJymuIVLJKccSm0OHKjbIyb5655dMB8GA1UdIwQY MBaAFAPcjGI5Hv3U3RjkaBnhd4ACqaGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTl5TVlqa2VfZFRkR09Sb0dlRjNnQUtwb1ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kMDgwYzctY2VlNi00YjQxLThjMWMt MGVmOGMwMzZiNjE2LzEvQTl5TVlqa2VfZFRkR09Sb0dlRjNnQUtwb1ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9kMDgwYzctY2VlNi00YjQxLThjMWMtMGVmOGMwMzZiNjE2 LzEvQTl5TVlqa2VfZFRkR09Sb0dlRjNnQUtwb1ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3I7h/2N C1GJcUCuSRYo+NqpNIl5gE/5VBe/clqlXviy8Komfsf3h0EKohh8J++BDpyd7aqm 75gFGKVkoQ4zSVkNQTU5/qplljBs6OF6scysMWB7wrEL7+BB58Vzq0Jn/B4N6Pth m+sJXwAJyFpTxM3sanRerhG785Hjk/64VeZJoFHCM27VDAq7izFym8t7ut3vU9hj xkoEVJ+Kdh9Vg4SXGl/x3gVKWpxOsDMHE4NcGypRI/jpV5WKTlT91k3ahs2uVuBU hXyl4EL9TnpkXqlQEtlNozD7EpBM7OvcyRjIOjRpkzjozd6/vo/GecUbK7Ghmzc+ lZxy/VkEKEnBlw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:57:45 2025 by rpki-client